unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Add netbox engine admin policy #116

Merged
benvin merged 1 commits from benvin/netbox-admin-policy into master 2026-08-09 12:02:13 +10:00
Conversation 0 Commits 1 Files Changed 1
+42

1 Commits

Author SHA1 Message Date
unkinben b11a55edd9 Add netbox engine admin policy
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
Why:
- The netbox secrets engine mount + roles land in a follow-up PR; its manage
  policy must exist first so the deployer can create the config and roles the
  moment the engine PR applies (policy-first split).

How:
- Add policies/netbox/admin.yaml granting the deployer netbox/config,
  netbox/config/rotate and netbox/roles/* (excludes netbox/creds/*), bound to
  the tf_vault AppRole and woodpecker_terraform_vault k8s role, mirroring the
  gpg/gitea admin policies.
 2026-08-09 11:29:43 +10:00